2 lines
5.0 KiB
JSON
2 lines
5.0 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux Kernel","vendor":"Linux","versions":[{"lessThanOrEqual":"5.11","status":"affected","version":"5.6","versionType":"custom"}]}],"source":"cve-coordination@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"EDBE9988-4B34-4FF5-8D4F-8BAD2A0F7D87","versionEndExcluding":"5.10.162","versionStartIncluding":"5.6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"EF0D3E9B-CA93-4B02-86F4-AE081E0D30AD","versionEndExcluding":"5.11.6","versionStartIncluding":"5.11","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"CDDF61B7-EC5C-467C-B710-B89F502CD04F","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93."}],"id":"CVE-2023-1295","lastModified":"2026-06-17T05:27:34.753","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2023-06-28T12:15:09.340","references":[{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=788d0824269bef539fe31a785b1517882eafed93"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9eac1904d3364254d622bf2c771c4f85cd435fc2"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://kernel.dance/788d0824269bef539fe31a785b1517882eafed93"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://kernel.dance/9eac1904d3364254d622bf2c771c4f85cd435fc2"},{"source":"cve-coordination@google.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://security.netapp.com/advisory/ntap-20230731-0006/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=788d0824269bef539fe31a785b1517882eafed93"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9eac1904d3364254d622bf2c771c4f85cd435fc2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://kernel.dance/788d0824269bef539fe31a785b1517882eafed93"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://kernel.dance/9eac1904d3364254d622bf2c771c4f85cd435fc2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://security.netapp.com/advisory/ntap-20230731-0006/"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-367"}],"source":"cve-coordination@google.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-367"}],"source":"nvd@nist.gov","type":"Primary"}]}
|